← Board & Book
Board & Book

Privacy Policy

Effective date: April 2026
Last updated: April 2026

Board & Book ("we," "our," or "the app") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights.

1. Anonymous by Default

When you first install Board & Book, the app uses anonymous authentication. Firebase Authentication generates a random anonymous user ID that is not linked to your name, email, or Apple ID.

You can use the following without creating an account:

In this anonymous mode, your progress is stored locally on your device and synced to Firestore under your anonymous identifier.

2. Information You Provide When You Sign In

If you sign in with Apple or with email, we collect:

You can use online and social features only after signing in.

3. Online and Social Data

When you use online features, we collect:

This data is stored on our servers (hosted by Hetzner Online GmbH) and is required to operate the social features. We do not read your messages except as required to operate, secure, or moderate the service.

4. Progress and Gameplay Data

We store:

This data is stored locally on your device and synced to Firestore when online. It is linked to your user identifier (anonymous or signed-in).

5. Purchase Data

Purchases are processed by Apple. We use RevenueCat to verify purchase status and premium entitlement.

RevenueCat receives:

We do not receive:

6. Push Notifications

If you enable notifications, we collect a Firebase Cloud Messaging push token in order to deliver daily puzzle reminders and friend or game alerts. You can disable notifications at any time in iOS Settings.

7. Analytics and Diagnostics

Firebase Analytics collects usage events such as puzzles solved, chapters read, games played, and settings changed. These events are linked to your user identifier and do not contain other personally identifiable information.

Firebase Crashlytics collects crash logs to help us fix bugs. Crash reports include device model, OS version, and stack traces.

8. Information We Do Not Collect

We do not collect:

Board & Book contains no advertisements and performs no cross-app tracking.

9. How We Use Information

We use collected data to:

We do not sell personal data. We do not use your data for advertising, behavioral profiling, or cross-app tracking.

10. Data Retention

We retain data only as long as necessary to provide the service.

You may delete your account and all associated data at any time from Settings → Account → Delete Account & Data. When you delete your account, we delete or de-identify your account, gameplay, online game, friend, and message records within 30 days. Some records may be retained longer where required by law (such as purchase records for tax compliance) or in encrypted backups for a limited period before automatic expiry.

You may also delete the app to remove local data from your device.

11. Your Rights

Depending on your location (including under GDPR and CCPA), you may have the right to:

European users: Our lawful basis for processing is contract (where data is necessary to provide the account, online play, and purchase verification you requested) and legitimate interest (for analytics, crash reporting, and service operation). You have the right to access, rectify, erase, restrict processing, and request data portability. To exercise these rights, contact us at support@boardandbook.app. You may lodge a complaint with your local data protection authority.

California residents: We do not sell or share personal information as those terms are defined under the CCPA or CPRA. You have the right to access, delete, correct, and obtain a portable copy of your personal information, and to non-discrimination for exercising these rights.

12. Data Security

We use TLS for data in transit and authenticated APIs for server access. Account passwords are managed by Firebase Authentication and never stored in plaintext. No system can guarantee absolute security.

13. Third-Party Services

We rely on:

Each provider operates under its own privacy policies.

Links:

Data processed by these services may be transferred to and stored on servers in the United States and the European Union.

14. Children's Privacy

The app is rated 13+ and is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has created an account, contact us at support@boardandbook.app and we will delete it.

15. Changes to This Policy

We may update this Privacy Policy when our practices change. The "Last updated" date at the top reflects the current version. Continued use of the app after changes indicates acceptance.

16. Contact

For privacy-related inquiries, contact:

support@boardandbook.app